aboutsummaryrefslogtreecommitdiffstats
path: root/view
diff options
context:
space:
mode:
authorzotlabs <mike@macgirvin.com>2017-03-30 21:05:31 -0700
committerzotlabs <mike@macgirvin.com>2017-03-30 21:05:31 -0700
commitc4f5d17db6796b071435069ef7138a145b04cbd4 (patch)
tree466cb6db781ed5dd5677928743cd519936e0cf52 /view
parentd1a018f2e8330fbf49ade51ec94fe5d7eb475d57 (diff)
parent81736a01299f7c963e361e9b192df074999d16d8 (diff)
downloadvolse-hubzilla-c4f5d17db6796b071435069ef7138a145b04cbd4.tar.gz
volse-hubzilla-c4f5d17db6796b071435069ef7138a145b04cbd4.tar.bz2
volse-hubzilla-c4f5d17db6796b071435069ef7138a145b04cbd4.zip
Merge branch 'importcsrf' of https://github.com/dawnbreak/hubzilla into csrf
Diffstat (limited to 'view')
-rwxr-xr-xview/tpl/channel_import.tpl5
-rwxr-xr-xview/tpl/item_import.tpl4
2 files changed, 2 insertions, 7 deletions
diff --git a/view/tpl/channel_import.tpl b/view/tpl/channel_import.tpl
index 2028d6181..baffe9b06 100755
--- a/view/tpl/channel_import.tpl
+++ b/view/tpl/channel_import.tpl
@@ -1,7 +1,7 @@
<h2>{{$title}}</h2>
<form action="import" method="post" enctype="multipart/form-data" id="import-channel-form">
-
+ <input type="hidden" name="form_security_token" value="{{$form_security_token}}">
<div id="import-desc" class="descriptive-paragraph">{{$desc}}</div>
<label for="import-filename" id="label-import-filename" class="import-label" >{{$label_filename}}</label>
@@ -40,7 +40,4 @@
<div id="import-submit-end" class="import-field-end"></div>
<div id="import-common-desc" class="descriptive-paragraph">{{$pleasewait}}</div>
-
-
</form>
-
diff --git a/view/tpl/item_import.tpl b/view/tpl/item_import.tpl
index 65de7fcaf..e976417e1 100755
--- a/view/tpl/item_import.tpl
+++ b/view/tpl/item_import.tpl
@@ -1,7 +1,7 @@
<h2>{{$title}}</h2>
<form action="import_items" method="post" enctype="multipart/form-data" id="import-channel-form">
-
+ <input type="hidden" name="form_security_token" value="{{$form_security_token}}">
<div id="import-desc" class="descriptive-paragraph">{{$desc}}</div>
<label for="import-filename" id="label-import-filename" class="import-label" >{{$label_filename}}</label>
@@ -10,6 +10,4 @@
<input type="submit" name="submit" id="import-submit-button" value="{{$submit}}" />
<div id="import-submit-end" class="import-field-end"></div>
-
</form>
-